$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft File: 8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft (raw, json) Hash identifier: 0fcvEJnENIxNY7dY6EPkpHSTGDZVGD10/Q2SNskTuIk= Subject key identifier: 5C:28:B4:34:41:44:9F:25:03:C9:98:17:DA:B3:44:B2:60:23:E2:50 Authority key identifier: F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67 Certificate issuer: /CN=A912FBD5/serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167 Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft Manifest number: 068C Signing time: Sat 18 Oct 2025 23:54:17 +0000 Manifest this update: Sat 18 Oct 2025 23:54:17 +0000 Manifest next update: Sat 25 Oct 2025 23:54:17 +0000 Files and hashes: 1: 8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl (hash: OCbsbK0HFq2nQCAkYV2rplt7VOeZHvAbUHBsxWCuG6c=) 2: C0D6C00E8E5511EBA9EA9977C4F9AE02.roa (hash: d2oIVGi69pBa33ybuBMk+1p+0WxxE+fB43cE7gCYVHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBD5, serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167 Validity Not Before: Oct 18 23:54:17 2025 GMT Not After : Oct 25 23:54:17 2025 GMT Subject: CN=68f428a9-2a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:54:8b:33:50:3a:a3:bb:87:ee:7d:81:db:a1: 30:39:4e:75:41:4d:14:f6:5b:6e:64:b5:d4:0e:da: 75:c1:60:79:5d:5e:d1:d2:e1:7d:b5:fd:c6:88:b4: 18:00:35:9d:37:7d:90:b2:92:9c:5e:a8:ad:fe:36: d2:67:e8:4c:a9:fd:4a:4d:7b:a9:ef:a0:63:9d:9e: 3a:39:bb:fc:95:31:07:24:d5:ed:a1:e8:d0:79:00: a4:ac:44:1b:cd:fb:86:ab:d5:c7:20:86:6e:a5:10: 36:fa:44:f2:79:ef:81:48:5d:06:eb:59:d3:c7:0f: 19:da:6f:9d:b1:e6:23:7c:96:96:a1:c9:ba:46:de: d7:3e:2c:9e:8b:f4:07:93:fc:ac:86:96:d3:60:ec: ed:ac:8f:38:66:f0:dc:8a:32:97:29:61:56:bb:d4: 06:cd:b2:ea:71:81:ed:d8:c8:ac:7d:dc:48:2c:01: c4:dd:03:ca:89:80:9d:e1:3c:ad:0d:cf:d1:74:9c: fa:bd:da:b5:71:51:85:34:cb:89:00:f4:a5:b1:41: f4:f8:db:e5:8c:70:17:26:68:3a:6a:c3:16:bc:d2: 61:86:f7:70:63:ea:37:a1:eb:f6:28:7a:7b:7a:d2: 51:e6:b5:3d:6b:51:2c:8b:2d:88:5f:70:9d:00:e9: a0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:28:B4:34:41:44:9F:25:03:C9:98:17:DA:B3:44:B2:60:23:E2:50 X509v3 Authority Key Identifier: keyid:F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:d5:c4:8d:61:b4:84:4c:b3:b0:7e:8c:66:c5:c9:b6:f0:cd: 6f:75:83:a0:e4:a1:54:93:dc:24:65:f7:29:76:30:09:46:29: 75:e8:6a:be:be:4a:b3:f5:67:f3:0f:e7:15:8b:69:de:c1:60: 8f:c0:55:76:d3:73:e6:1e:4f:35:28:fe:32:09:ab:40:88:21: 82:82:16:86:d1:9a:4c:06:c0:1b:41:b0:75:0f:d2:a3:19:b8: 25:03:94:a1:5b:da:8b:4a:4c:38:63:55:ea:40:e6:c6:8b:b0: 62:78:d5:f6:06:b3:18:e4:ef:5c:75:0a:2e:e6:f1:b9:36:56: 96:14:67:5d:36:cb:0c:ea:59:79:b0:18:56:4f:4c:0c:63:d8: 9e:5a:a9:4b:b3:4a:40:29:b7:ec:ca:c8:19:cb:7e:2e:0a:2a: 29:e4:f1:ef:00:1c:fe:d3:e8:0d:3b:05:48:36:6a:d0:77:9b: c2:32:a3:c8:a0:29:e5:b6:d1:e0:16:d4:1b:a5:89:fa:7e:1e: 2b:95:ed:39:10:35:9d:ff:33:28:9f:2f:ca:25:e7:df:22:d3: 3c:5f:56:c5:2e:69:fd:c6:58:4e:b6:71:ff:4d:f1:0c:d6:96: 94:e2:2a:fe:a6:7f:65:75:fc:4d:2c:51:48:c6:9f:ee:75:37: e6:8c:9a:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCRDUxMTAvBgNVBAUTKEYwNUJCRDI2RDRERTA4RjY1ODhDQjdGQUZGQjE4MzBG QUJDMzcxNjcwHhcNMjUxMDE4MjM1NDE3WhcNMjUxMDI1MjM1NDE3WjAYMRYwFAYD VQQDEw02OGY0MjhhOS0yYTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8VSLM1A6o7uH7n2B26EwOU51QU0U9ltuZLXUDtp1wWB5XV7R0uF9tf3GiLQY ADWdN32QspKcXqit/jbSZ+hMqf1KTXup76BjnZ46Obv8lTEHJNXtoejQeQCkrEQb zfuGq9XHIIZupRA2+kTyee+BSF0G61nTxw8Z2m+dseYjfJaWocm6Rt7XPiyei/QH k/yshpbTYOztrI84ZvDcijKXKWFWu9QGzbLqcYHt2MisfdxILAHE3QPKiYCd4Tyt Dc/RdJz6vdq1cVGFNMuJAPSlsUH0+NvljHAXJmg6asMWvNJhhvdwY+o3oev2KHp7 etJR5rU9a1Esiy2IX3CdAOmgGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwotDRB RJ8lA8mYF9qzRLJgI+JQMB8GA1UdIwQYMBaAFPBbvSbU3gj2WIy3+v+xgw+rw3Fn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJENS8wRDI2RDRBMDhF NTQxMUVCOTMzMDhBNzVDNEY5QUUwMi84RnU5SnRUZUNQWllqTGY2XzdHREQ2dkRj V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhGdTlKdFRlQ1BaWWpMZjZfN0dERDZ2RGNXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJENS8wRDI2RDRBMDhFNTQxMUVCOTMzMDhBNzVDNEY5QUUwMi84RnU5SnRUZUNQ WllqTGY2XzdHREQ2dkRjV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp1cSNYbSETLOwfoxmxcm28M1vdYOg5KFUk9wkZfcpdjAJRil16Gq+ vkqz9WfzD+cVi2newWCPwFV203PmHk81KP4yCatAiCGCghaG0ZpMBsAbQbB1D9Kj GbglA5ShW9qLSkw4Y1XqQObGi7BieNX2BrMY5O9cdQou5vG5NlaWFGddNssM6ll5 sBhWT0wMY9ieWqlLs0pAKbfsysgZy34uCiop5PHvABz+0+gNOwVINmrQd5vCMqPI oCnlttHgFtQbpYn6fh4rle05EDWd/zMony/KJeffItM8X1bFLmn9xlhOtnH/TfEM 1paU4ir+pn9ldfxNLFFIxp/udTfmjJrR -----END CERTIFICATE-----Generated at Mon Oct 20 08:37:09 2025 by rpki-client